FF6 ok
你紧张了，但是国内靠 百度
百度读不出来ssl的，慎用啊
我说的就是真理，其它回复可以无视
IE8 谷歌全部正常！
007.gif
原帖由 李院长 于 2011-8-29 21:20 发表
back.gif
正常，你所说的情况极有可能是你朋友的系统是精简版的盗版系统
这种系统太过精简了，把很多根证书或全部根证书干掉了
所以可以无视
可能吧，刚问了这位朋友，他用的是ghost的系统，不过他访问uk2的https://controlpanel.uk2.net/却显示证书正常
原帖由 害羞哥 于 2011-8-29 21:31 发表
back.gif
你紧张了，但是国内靠 百度
百度读不出来ssl的，慎用啊
ssl和http同时启用的，只是会员登陆的时候必须要用ssl连接
ie6 chrome正常
不过你的证书配置好像真有问题
* About to connect() to www.hostsir.com port 443 (#0)
* Trying 69.163.40.106... connected
* Connected to www.hostsir.com (69.163.40.106) port 443 (#0)
* successfully set certificate verify locations:
* CAfile: none
CApath: /etc/ssl/certs
* SSLv3, TLS handshake, Client hello (1):
* SSLv3, TLS handshake, Server hello (2):
* SSLv3, TLS handshake, CERT (11):
* SSLv3, TLS alert, Server hello (2):
* SSL certificate problem, verify that the CA cert is OK. Details:
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
* Closing connection #0
curl: (60) SSL certificate problem, verify that the CA cert is OK. Details:
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
More details here: http://curl.haxx.se/docs/sslcerts.html
curl performs SSL certificate verification by default, using a "bundle"
of Certificate Authority (CA) public keys (CA certs). If the default
bundle file isn't adequate, you can specify an alternate file
using the --cacert option.
If this HTTPS server uses a certificate signed by a CA represented in
the bundle, the certificate verification probably failed due to a
problem with the certificate (it might be expired, or the name might
not match the domain name in the URL).
If you'd like to turn off curl's verification of the certificate, use
the -k (or --insecure) option.
原帖由 李院长 于 2011-8-29 21:43 发表
back.gif
不过你的证书配置好像真有问题
* About to connect() to www.hostsir.com port 443 (#0)
* Trying 69.163.40.106... connected
* Connected to www.hostsir.com (69.163.40.106) port 443 (#0)
* successfully...
这是什么工具测试的？
我的配置是这样的：
"
把 SSLCertificateChainFile /home/ssl/server.cer 换成 SSLCACertificateFile /home/ssl/server.cer
试试
我用的是 curl 测试的
合并证书没？